sssd-dbus-1.15.2-5.fc24$>+r1L|qrC)>@߶?ߦd   : ! 0Dago D  X  l        B t 88 8( 8 90:D>؃?؋@ؓG؜ H I XY\ ]H ^ bdeflt u, vTwތ x޴ y0ߜߠCsssd-dbus1.15.25.fc24The D-Bus responder of the SSSDProvides the D-Bus responder of the SSSD, called the InfoPipe, that allows the information from the SSSD to be transmitted over the system bus.Y.buildvm-armv7-04.arm.fedoraproject.orgFedora ProjectFedora ProjectGPLv3+Fedora ProjectApplications/Systemhttps://pagure.io/SSSD/sssd/linuxarmv7hl if [ $1 -eq 1 ] ; then # Initial installation systemctl --no-reload preset sssd-ifp.service >/dev/null 2>&1 || : fi if [ $1 -eq 0 ] ; then # Package removal, not upgrade systemctl --no-reload disable --now sssd-ifp.service > /dev/null 2>&1 || : fi if [ $1 -ge 1 ] ; then # Package upgrade, not uninstall systemctl try-restart sssd-ifp.service >/dev/null 2>&1 || : fiQK5 큤A큤Y.0Y.:Y.fY.0Y.{XqY.Y.Y.Y.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-1.15.2-5.fc24.src.rpmsssd-dbussssd-dbus(armv7hl-32) @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @/bin/sh/bin/sh/bin/shld-linux-armhf.so.3ld-linux-armhf.so.3(GLIBC_2.4)libbasicobjects.so.0libc.so.6libc.so.6(GLIBC_2.4)libcollection.so.4libdbus-1.so.3libdbus-1.so.3(LIBDBUS_1_3)libdhash.so.1libdhash.so.1(DHASH_0.4.3)libdl.so.2libgcc_s.so.1libgcc_s.so.1(GCC_3.5)libglib-2.0.so.0libini_config.so.5liblber-2.4.so.2libldap-2.4.so.2libldb.so.1libldb.so.1(LDB_0.9.10)libnspr4.solibnss3.solibnssutil3.solibpcre.so.1libplc4.solibplds4.solibpopt.so.0libpopt.so.0(LIBPOPT_0)libpthread.so.0libpthread.so.0(GLIBC_2.4)libref_array.so.1librt.so.1libselinux.so.1libsmime3.solibssl3.solibsss_cert.solibsss_child.solibsss_crypt.solibsss_debug.solibsss_util.solibsystemd.so.0libsystemd.so.0(LIBSYSTEMD_209)libtalloc.so.2libtalloc.so.2(TALLOC_2.0.2)libtdb.so.1libtdb.so.1(TDB_1.2.1)libtevent.so.0libtevent.so.0(TEVENT_0.9.9)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)sssd-common3.0.4-14.6.0-14.0-15.2-11.15.2-5.fc244.13.0.1Y.@Y@X-X~@XO@X6@XOXWW@WWW5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 1.15.2-5Lukas Slebodnik - 1.15.2-3Lukas Slebodnik - 1.15.2-2Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Lukas Slebodnik - 1.15.0-1Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Lukas Slebodnik - 1.13.3-4Lukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves upstream#3382 - SSSD should use memberOf, not originalMemberOf to evaluate group membership for HBAC rules- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Backport few upstrem fixes from master - Resolves: upstream#3297 Fix issue with IPA + SELinux in containers - Resolves: upstream#3360 Do not leak selinux context on clients destruction- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Additional upstream fixes- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)/bin/sh/bin/sh/bin/sh cadeuk1.15.2-5.fc241.15.2-5.fc24 org.freedesktop.sssd.infopipe.confsssd-ifp.servicesssd_ifporg.freedesktop.sssd.infopipe.servicesssd-dbusCOPYINGsssd-ifp.5.gzsssd-ifp.5.gzsssd-ifp.5.gzsssd-ifp.5.gz/etc/dbus-1/system.d//usr/lib/systemd/system//usr/libexec/sssd//usr/share/dbus-1/system-services//usr/share/doc//usr/share/doc/sssd-dbus//usr/share/man/ca/man5//usr/share/man/de/man5//usr/share/man/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -march=armv7-a -mfpu=vfpv3-d16 -mfloat-abi=harddrpmxz2armv7hl-redhat-linux-gnueabiXML 1.0 document, ASCII textASCII textELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-armhf.so.3, for GNU/Linux 2.6.32, BuildID[sha1]=0c1eea50cda836a270bdb597cf461cbf0cfb13bc, strippeddirectorytroff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)0RR/R+RRRR RRR1R R-R)R!RRR RRRR RRRR"R.RR&R%R'R(R0R$R#RRRRRRR R R,R*RRRR5utf-8?7zXZ !#,]"k%j{}{&-򝍨|kCA`!@E 5>rmm|c,gw5_@ѕV7#^?<M0BBtI`FvEU! ̧}SC:1G3`] bg17͘} GTe" bpGݙli@X#-YcQ |l^hE$f_P3xdtS5 l{Gƭ,pq4CI;us:q8;@Ҙ,opr) 0-K"nXgszˡUa]LD?:POU~B2sVJ;/5IYj.)j6X"go6ּtT]zlyA/2cVz2K&vR ԁ'm4TbN|Vр=j ^*Ot|H&bmVx@ 0/F`i1 bЂ3ȭydϦai2yh/>(^gC)[BpA'x8y닆KRYvصl9%tӵ.>găQFH55%cmݝUؿ}xS o?IXz]Jt9&3m!uJU ^HHPeT|J5dhv@35 ̈́u=~1$MnտW>1{XǵlLMq!7|0w#Bp$uЁC ̜V+\Q˥ . O(r=Le}fZJ9wDVV6V &wb{1n؄{n&aQb8bqF Y_3[#C ϿGn\Ԥ~"4g?"$ikW\czޣځ,L/egUtG-o k VݬWܯȟ^F^Q*bWT4oŝkk> /iph%< ߋ>/hA=\1(H8W\Nfp"Ҋ`}ez(H ٞ(kmV @ 7"Vqk'.IJS}PjK[ڏy;⩾ M|pbja2/bBqk06画UL{ Zxˬ`Q0A͸0@bO5l4-vqזU(͹UnANM>cmӛNcpG~8WeeP~;6MUvknY]?WbpHi.'jNb#2fyVr(&QmQ{w*?*( RMzӄw%L $sUok2Π$ܫGt#̗pg8n4'{8# 5" O'0#s2Wb񣖱@|Gr&y8mX8&g~xié=Z#ҡH{f2EM&1M;{31=8/:RN-0W\GSБL@IGd}=9$3uo~|EzVi@K[@d ̟֓$|WX I% 8oe"Jmd|/"Wk_/ȖSExٗd5E׹+xNY:LСv@;䵝LKbDp|4L~{KY,8kouI#$|Oϭ}h)(ܬ$lG%ẼvV.~2bU.7/ aP' *-3m,X3El|vV4;SZ,PF'YU,~x`b!/PXGA"*"f&#WqYNE<[npץq/;/cUylYuyN*Ma7Ä|xBfHWEX&꒓7i7& iIpG*R;E棬%0~bS hx@wFe6Q1#& u֬NY&EWę{ W8šc žV)ʬTlLe߿)'rM rK=4y^Wmk&hmiJdtϺ}M a! v/(Yg|RK tݞδ(ݫcgipAGyqwm=T0=sw"Zn }%Y3UJ;wQZw#{[<,O>D7+C+qMƠheQ֣EB_VMv3ki1ec$TP*RV3u5tZR z~6]o%e4Au#¦WDZt=Lu8ZK>'/F#H԰p~ƪ@+P3/*I;3X@s[x&LI6g{}/ٿbuo'3),`%Uk8CV@i[.Fl n#Pw# \Z9F:/?E=bߒ:t|m[|ylrxi46YQ_FYq\dJ4dMUnԯt=:52}k\k}ѡ]ljȵ5%8ZcOjp1'r~Da}3T{ҕ*[H|U-NyJDU %_!ЊMCw%Z'6wxV޳醣ebfPf>J{gDk uW^QjtŔڶ'(9a$XN7Xf_v~xE1L3vBH333ud4O$~ ݎ?fgWs>W O O3ɖxn+)yV=1A\ D]B(uXI"q6ůP'Ɵfx\l 4Mv- \p o=aD* x_?h i jIs: F\P Pc@\Bp O ~f#;oby3J7 ۩ˇ \*o)[Ǥ-?69oe/I&U-Mnx}<|48/ w ˦k߻8 .S ;\CU٢w0]Lπ4-0)9u r,oHϵ>:WMCd-֜%rFgBcW2k/A4dw\JĒ;:~){lo֤<,aFڑMgZVF`(dkm?\^+ L]۹* ǁQY~Gi~Ho>Ҿ§3֜#S=i>}$_'s{~^};;p>UR2Q|"ÚfNI߮u=^!CZXF^ÚM_+@˵]ЕmU$dtSVGBdoѐ֐tm8#}ٹ*wI"@䚦Bha&6g-SC`Du v8c"T޽K&R9\)o{n0srBaYFZMSZVQG2P4^F_TᨂL|k $B x-w p^AWQN('*|˓[~PG1BGFr|7ܔ:LW'hj ꒖x|Ӊ&́htwۿc^I%hշ"Db|̸qv D(:Ld7e 0`Dq\{VS|ظ"}ـY!0IF?٪ʺqL͇fY]Ƿ a Z"{SL<QgTaH%SWY寧fX_U˂TMrٳ!4PF Y(|et CDKa[IX{ѵGy^v!}( OFd>9Z0b&PIr)BVgL-<Җ2FU0c(ǸՏ*9@S6jf/ ؼO#nI H,alOI;jŕ4&sMM;6 m)jERS>cƵp6%._әZaˢ S$emZQtq䏢_B ! ]ub*_N ȓTnX j8q.:]2.i\GBiy)+*c[aȅy攍to1% hSqOwC[ܗ%HW郧CzS!xZ(gtTRThzJ_d+s;PD crY&~G%-!wi ETy DԨen޿wy6jPRY56"EM6%;),K ~QL[1Q['[JĉNZUCVm*V<,*u[~?$$۽gw̤oZ[5BaO,8XD-ʌQCVM!* VבL3&GQ Ў<0pӦ*S(w4; ^{mlZx9Yq^`/ sS=LE9*I,ǡ֞q!78ۭ:8+\J-,eDPIQ"ChOZۚ1eͰm{ǓxFu`˹ Iތ=~:Rڥ>p̀=plO"dpz(xO(D:aNZ--e >s6}T$cH7t-3\9c7Gԝh:|H2ɍ8_y5Ŧ}rK:@bu='7\$O܆–[E#6z3*N6?G[cS;6.nQh×60(j崶nR;p~o&3XT uMR>T̥\ú xX6.jAwUi&?JKpR fj6Q\B Gjnœ)> ײ@K& 1J yU|;kIKBa [SYa?#|O*;յ@;φdL{Eua8K#8-?GR^hXRk:>6si/&;.睢v_Un$+F=i]I&jtlŹ--1#g-m pJjL>RH }Lv6y7 :ɴ2lݐؔmr ے;opN |Paa!aV6 V4_ w쿪2vlw3U0^9kw&2,-*"b/i7qbo8LgydȔB^'Sk;<*%sH6լ姓~?SF9Tt^hc.q!U0D7ݵvjQ&!W3tk]+" Jl6NG۴Fn\ܼbT -Ktɫ^M2@o(''jc&P6 ʍ A掭:`>: {q}ˏ'NtKCS8Mxxy 4`U)ˬU?RZ#ÆdQ0@P2 *W8Pq&G"/Eԃ*UIp@vCCb٢ɔ Pד"JѧxF~,;oC3DUNhAR@ӈ wa7a;]:U'"@P͵,^OH!]h- Xu7tqqԋnw|6,RhE?l_YW;)vZ(t'22 vVdHiV %q$)0-zEuUc(ʷ+n73"5E; %׆fl '?y"HwF/<:x>|cup\g@Kn,uݶFCHG.N9tb7YSjce=゙e{ףv[kH7Gc^ݫ{RIj w< GchЂqF=r4вW4oBBn;(Rk`#<2^K_- <3Б=)}gVեuAL-> WBڼ OVflJ)/ ;=4 DklȐN['72 %PPjY5N I9 zP\Sx_\"V2{ }`]d`09h|yۜ toMsp(nNH0uֆ}f(ȓ%FZ3)sC$W9lJ2 F̺m Y edC߄bFѕ[y56w zt4<i+qqBUEH-ZQ2JoZ#}41x5#'ʌ&q!˵WiEۛ3I/q(G׽:Ҋ?mE݁$2gpuLʗ)&5zÖ_0CAP ̯G+K<+Ai vH~z'` ]x(񈘛Sy׻aRAJrűO[{} `hrh~.I2I\Wpkm@pIج7 о)Y (k9EA8ٖhIQe3U lG™eIyW1} RyT誀p׵z2jɲkyR*RVuA+5EžMǐ 54E;Q@58ER\wȷm"'븲vDင~~NQZ 3k7Bg 7Iaw .kO=\aS&E"%]t It37A,^բ }O>GzM4X )b01S;UZL Mknhѫ/-&|ruAS>%? n?<@`K"Y݈! ӵD#SG=iuI=&kZqgkQ:X-*Hy#2<ϖ *5S(Z$i.դDYӳPħcMx r;P{`+q-yzsj*E&aM\J{'%C UkJ4ŧ*Dn$O-1٭Q*2=\/=:)Hl=o7iJbݍ}M4(t^߇ %KjOF_2axǢ5E'!JSS*+ʕ0"#uld#)vo/2V|,fbi1؃1/߼R;pS];'|6̏ᯥwZ-%C7%dt?VūMQkyfZT7DNd4vΑݥBHY {̑W9C߁ܴG$1˓lc< 1(.N wCT۞v8ݽu 7YҌy,:d."v^CIz`N}q&R5*jV ^lFzW:h %hQR˳/g4ǭ.VM\Y^d̚ҸDSYD!Vmm<C"h]c+GL>\䊎K1eK82t8:` yMgkk=̤!`b_Rzθ=d_&{7rL*;gDw~hzx(:\Ī^;,ŽȖ}3"D?OȃϜT淵 ƭX"5%CNIyrj l,r:<˛kγ/|/ݐJ$ڱJ֤Kg{Q`Sw"Hh<~ ს'*y BOpB S{ G2܎CPKYHnps_Z4Hh5K^+uݿzGLU%Clkf\ `8s ~Š3D"3w݇QKq!L7lYT tal5vjN2AS^(W_'(o2R:We5' & Tc0eŶ),Y-lJ5CF-gHP* kuDL瓁Cyp<tD~ʳ>v"N&bm-0fmhlzs3@,b,qVz1X, +V[totf:uAnYB9u1M`C[8t u`CeLM阧0MJ'n5P80 %7L[#. ߠ:YX՜OIDUv6@l+(%=Cmt7LH glY;JrLoݓПht?Vsm3/F!J+QӖxYkG85;& ԋgX QK@B}p-.7:9-jIt+OׅHa*w? .&dTcYe%&= ,`4HD/nLC p>YaXK:oei *X >ۖ&41BM0<:J‹u!:Ll;u2w{}26@ ,g{ J]:/0!]됝8OA\ꤡ)JKҷ$xnPpRt!ڇGXYdj!T(68]X.^N퉎1`J۞~N~G Cx;$kTw6V !)-fRӡо$5q-$e~ Q0lο#j[h! Fs<+@%236D1iUvtos1~+'g}NStlGW%[`L|+Fg WIO뀷D-0Hn3-eTĭT1YU wq_+'C qiUay Cʹ}{`)L+Xi)%dƶNr,ԌuaLkGc|ZY7d3: Q3vU;-JERl/ Bbšk84g!>/jGAڍ D=B=ndY6|@g4E2< Ob+=uy@( ߼wM@H{t;[Laj#BypKD"8(zSBj쬝RtZ5|+p )#Ud j+NN[M✲P̐v{љ{ L=7Sfה  a|7h&VR4lO0XV PhTvc>-(aJ97zg8cUU@IT `e|7S"wMz(T*6sn/%뺈0gIZ9j/am񍨀kqq]6c J[.;DQQ2пwQ/z?m xxt n4Tk 6Ajܖ6D_׳at]aزĶwZF>wvz &$:Q^O&8iFS3+bq'͆gF 0^!=XȬ>~2+=Fj;+d$/%pqF,~8IDv^zWtM a+(>L|[eʂQ(Cɩ ,PrQ0Dd[DHk0Z:U&8\o#&=U;Uȁ,r_ n)%Wm#@'C9%EBwMU*PM eau0Z}Bq< Ig}Fu^M'3M5],Q:TUd*S>S}|:6O\ޢ.c%H[{;<m#A |fDO_ZөVu<޵ێ܀$-ZMv pi dFYwNNU!ۀ(n: vTa&=uESb@]8H<> L`_ k<@H-$ !:9I=ZR[GG &s5P>jFyaQU~F}Rz(bR)"z0c{)$FFϫkJۻއQ$YYڒc-㪖BIST$,abBB{K:u+U"NWK3p]f}c/ 4Шi`e )X#/fe[.\QRz4-o6솣OSi]~TNu8)_H`aoQ_ZVJM0\WsBEȴH=x jUzi*N?Q1=MeBipމKt]$!EȢ]Nm+uT{S_0"Ex-K]L"@HDlD[.=si(xIWȰwuZwbrA\<ZznNhӊ^~Ah7"p]{9*U4b\+!_?4LO~CJL{ᷣ{ TY#95ez ')/ꢘ]匮 ir u0H(0IMP4vDM1h5 @,0AkB~O 4U6 .|c*)=&)C&J!c` ]I`;.Ӕ O 9]K#69m %c[#Vb9kWc[XO1إuf>\7arW-*FYAev$a J'ْv`f|Y|T`$/{ (NR:zOHS-fD #?o5$|ScFdTz=WFZfu@! W~n˥0j\NJ1c$GQD}!mGgQq,F*~9|P4J?F@Rzz?֐VRpn3?O3TGl(wp0j- l5a0'fez@D Ƈ`^(>cB96uP/Õ1m=]ɀLnG6ds.)LPzDPbRc1Tu BJ*wṿJÖSJ_\>I[]n7{Iʓ -RwHPeZԸl0y ӯv\`$.iҔ {y-6r.:u",%AG>|uZ0P' -Sݺ _ZQ2]|Jf{z.m\@Lջw᱕qfB*Z#9zHL SY!g g|7I?9V};aTeqɛ<:(yq!+͏Fٗ|5H`Ab  e2l<ʺd3Q_ nfeȅ*ЫI6̡nb|2`զn͔!2 a_?%GrHͺ O"M5!m:A4#mWHIT@+Xtl^~Vt;c&vNdޗ"V 7 6(^ǚD=L>0`9ƿ NQT hxԃŁnECvE4k݃l~r˦*+)]C;JQhPg'F/^"SigJQUkAPOxkJ.|VlgNA!~JZ(&GK%:{JT֜LJB;P6;. @p@Bá(+׬;mM*ɔm0{dUZU ]DhP""U[2dWEL$U8 6$#IAg+U VDHWޛQYscIE& {!Q 6!HŎdX!aBS4Q 艊IMfXlz;7K8irjgy8e"N @~9]s%-3ՍQT:JίZ]AQ8A$[uק* p%Zغ25PqEυz9-y#b k ҤPi#M&aN v٣ɾ't#P+|ڰ=їC u4xhXa49'o)_:tpy}@+蚳o ?T-CN_AQRrZmUߺerշylWVNX=-OP2ufj;MB':q *R`<#*ǙוŲ\bG+fڋцZg1aFzA]X8L½Wmjϕ DlBT sR=%9pI[ȋ+˫c=[x@n#ډy Sc1Y&]`i AЫ˖_Dy}dx\hwِz!8= %1.;`]cW-hb&%֘A;.z # h@\z18E'k+f_씹pJb)fOqW1OħcF>Qe -bn픓 ~MMV~غ)s7Т6udFf$z?.[}x߈D ˈP@S?l Mo{3#٧hYj]!m0y6g7aA2hVHcM="q4v~ ( ZmmZF^ R_j=Gpe`Sf (m[D{\4op"IXo''񥉢SЦ|p]BMR2rcF"{^_ %YO}DLݽȁkO}蓑&e^I o1-(ηxFr\{UG!tqRfywogQ0^CD1~dX8n$奧RPn:lV;$TA/pXȈa4B.$3¨e'ԓA2_oN)Di%A=2EM~YX1O*;#zk0/kV)pTQfb]~JA]ˈYt泜K!e-fxp8~w&LF~p8pTߦ;;f:r1+7'?Q0KpM:ae^Yh4[#XN#j!zrq1 G3Q|r`"]f+G~𶑫yO% 5 bCO]LsimZs^Xi;~#Jġ#DdR Ŧv{ |3ZB~ zհV𽍠lM9Dem^hu,VTlB+?Х 9M ؿ\ y@o#^p.bP. aDWެ}[`@`kA;)$]"e!vm^ ֡b$q|>تeHim(  y9e?iaKG(* w"LJ"`mRoy 'ٻTC2eEI =_|K%k:%^8?|}V2{mI r-/0Ѭx%K Ǔ{ڛ<[ y"z2` D\aʺh4{`iF' HW=Ppo{ aЕ̷ [T75gRg=ĘXd|>2RZ_w:7Ҝ _i;:LsZ%v`ǨMYƀ1.)&;ypA%9aOYb3] +43BCpNc\ʥU'qvpZf7+0Ccc"DwN0 PZL{ڨa=,})ʶ}ɢ\yd@ AS躆@c:il?CQ/,lzLKN%µWc~UXBbcm_c> t/ b(hRFԯ9<~'+U 6AzCFc2,(vM^?t>ܻV.@^c<Şi t~ &.=4`VgCVL3b)4Hx+K;L@Oy9 ,}>Gr8@ ܸHF̡>aC#bz4\vG d^P;Q D9$6Kz?#.I0G{>zҙh;Me/.ĈI~l׊~u񛊅Z'̏D IS'D0,tT6*Z@fhfmͼkɕ_`fon#岭 q?sWq $9u*I\-BIL,O1Frm? %M|([|@-Tj p 9^+n [hX( k_dCs&2jPNt-Amأ |NXyY7x2mAl:Nojއԍ\7!Yj^lWC':6 ϙ ^C>qhIG;`5߮KӚ.ϡ$Mh.ZKva_aG*s-4X< # 4ҷ(8lmzLlI@ qdg]Ha{@dѤ1]BOts zâW:opa9Vڧ፽ʘ>c&iw~I}̷9sh`dRrWe'O@hL=3f~ O$>Lˠ;\2\5j.z}{,{ D:wcbU|ZTZ62id de wKՌaLm:sm{FGp3 |§P=8KsC8\HqFfokpi#@TK-Uu5.DSwRQ2V2K4h&tIo,Lg1p}]43 n}SΔ";BGꠢ-!+ъZ4lր@g7Xى~<}.J5J#vbu*Dܳ+%%=>&.{F`M@m -Eex? _y%TDߦE 6kcϦ&H.`qagL: 3;?Oy%ƌ1ȫtFo=@ބd#P#opILҤY?kGc XpnGre>xU"$9&IU/}Sugz+0 W/X\`zN̦:h8gu~rlMt62!@NOQ%mCImo[Bsgggn',ɡUcT뉜sm #$7 \򻠰^Goi2*;ڲJ$,Chޯa6n`s Ӣ&^=~X/?`*׻.'c 6ȶQ,a? k)ռ 2֑t cd3/M*6hh-=ƒ% +k"n7#L ]nwvdCa m;0KHlx0+nV9qu.KzKay*8F&T{ Yr+x8YNqF@g8F2)[,:+*Hlg. ("}r[yhJEwp%T7nGwFi2'Io@{_㚺Rۋvm~v3`*g9Wy6nYܱQ):(*m Yd8z{`L7OS̆PJPc>/YPڪ 2 k ~(RdC h&r͖j[A\}Ǒ|` `#&B`d~\ὅ=i%\BG{pږJ~R -סUJEe&Α %KzCb_ZH ~+@MN@!QVy%{._?xL97ʋ,1AABC=ϖ"Du1'&g$?e{lY[0YF]OPӳHQ  3w|' <3 QALd3I-w\ςH;m@gyNu({'( ?B (A&(bv1$xT]쳒Sӭ*O3z#.CNUw4ZX f]S)[+D$\pGJhV7]X#((f+5.;{U}7B㺐etZܾ$b`&XFB7p>cb> 837D˔0h)}̏~^sC.1 3-R0H/5DC! gX8iC Xς c&uY>V9'm0ZM$7%1C$<)ǀr+i+)~ &dj~EmJ,o,KAuC컪RoZY9VR~bj*$IW%Ou>u}9rT{3sj[ܰyﴽ=7BJq7>x=,fZ8𫴼ᕒD:Ih%=μǃJ^zd[k!ڛ3w~akbXCD"uƩağG;Q˚}ۗubepS%-@-~9-T(JEpiQ㎇@Gqc\O Qls5"yTqA,~9jF @. cU+RŻp+,d sRʨ`dT ɆbH, SѺ7W@"%-E"k库^fmňS&ˡ%6g '&Qinϓ.St(x#-5k# c`pβe0}w}便\V(1F{ܥ=lTR Q$WKW""Z; E{*:t7l=8v$ozeiE@@,I#%ObPBpH{:}ھn~h3)/fT(`QHr[koQ-LlO] wnRI!s!E<Quu#I8iإ ʯM +֢TI{1%$B?(8&|*@=rV 7`uϑu^ímQںLIݚFu Q4DkE M^)|tb#,mנ7,j%P ލcDN=pη8üQ`粭Ќ/Uqff]Y yfW/LgSk.燗׳ףӂg,O^*|`'~CMi!̀ ~9{иk^v\—*tDW(Pǡ* fnc!j2C?7մzy'l(_hd ncamIH٫' :&NjC]Tϖ`,04WEU"F[v%bpLmLM>*5kK jZ7+eґ3ͅ4yDh&׃1$0xS~/r j̩(3,lg5i?E(ϗ0",Afr}Y\e]*mVE xNTuɦnq"C/PIʥ.O)>cpo ߬O6iQ;.>ql|~=5*s}1 RDG}q/[,\UKn΃tl ;e[4]=1&Snx:"b]xW$ e`gNv@;{CU^cŁ. Bg檍B{l8mnVؔ5 ך/>%'z~';'&AeMACg_o(Eo3ΔxHD5Mw/4+5X(1[5LW2VpFBm!qFݝA^I^\VxsefTZ~>9E#.4*;"p5"(>j`i$:(p}<tjuOdl51٭iqbX>ˆ?I]SuSb"Z>ꮫLӓä#ph24|“n,pM*MKO6i8nlT5`Ϩ}>AG'H}4:K) ;Mc S{#߲1VȈg*ְ5_wA}w -a{H"=>SF`7lCMzMQ"[lOwAfz\ܡ~U( BHI𐨆mG*·/UgT6" OfC!9C%нvmغ2,iAzT=G6KPwn`rAnTu",#T_螨E.Z=&މEGZ ++âG)M\䲾8n):vKyVq9}gU&d3ޤ10]$v q=dE컸^c]8\Kj6 -Wb7*D]]Dl^Cc1봩Xi0FɢK(xtEOe6\5:z*~#8](6rD ]bjBZ- 0; ^HfTO<Ћ˪Y(@~Y tL8ȲMF)nN=aѨbDmnc`$a^OǁO&a=$/mVwiQ\8#;|9X0"h d 7HN`P$Ѕ>)ZD,\-zX7hQTCzLHJۚw!22:K #a`]#2ݒHݶfD :+V DX"Nz| I?, <|]3,RCU А iӋ `F`̍jf#袾Yx*  (UT9w5([dFSx['-.|} W8ti !6uOaqƢ/dsV ȀA*ѕ*jM,i}BZ,Rq!uAw[ ڌذ!*[PpbVЮ$/,}Ӎ?9r HdV؋xpAyUN=z8| :q_|Ǖ,<}[N)fjfm{EY [mT2c:&45K`xk[H"?(u<+5V0(\ .ʮooVޔE(j Upl[9<܁xlr~(nEsKru۟A.pyy0@F#;4JWcv"zkZ!'X:= MyOvuBIhl H:ֶ'JF'T98i c(W?pfE)ðCxYf4b5yțgkLՉÀ]6;rHyDH 9l^a6ݹ,Hhr%_@BΔ1b g$،^⽆U2YwH=X#m,*EzEsHB4FGpFljrsH>pe`Z,^#hJ@Y;t |J:0"pC-#?q mbCY\u)lwGp6kQIv37B(DYM,_t@&fV`sS6V1gxXY${ [1SX@vrĴVSrB; :NcDd0Բ@3-fD eccYqDE! Xv *M?bnK=)69$Hu{GEk@iI/t yUxj>7@{|?fCH[Ur}REՓڬήW0ʁOdwy&-fƟqcdn[2Tsh*.&_8CPصw^̺mUiɲCL 6qg׬MI~$iF}tѪNHeXH$WƄyu[?yp^}Ә5,1ek]2?WSe}ۑտwU$7͚s+ HJJF%ôvkόB)LA_(SI\brLoQq| wk,5~ >0t|C燵$3zY"bݽ$xFo ϴcK@DDRn%& Gk:w Pav }9ݺ9NEvlK\'G̫Or\֙ObK\haU ܻV{"Ē"CUPrLǒVh`Q(]0CH6DŽ5?IN-a,^ l@ Ruy_#UZ;̓us]gSZ Rp|]o )Z,kU0s+n#/çԷ!e̎Xm;w,e Gf Մ_sJ!]F/]i&c2F !f: =) ąi*fؓQ d,j{;9&(MUY:CKoi0r(O Db4)K T6k8k*p3D}gc5Ct̀Zx^q,e@+j%CP2=x" u2s =}Z;աĬ޶r|l7*[6†^<9Q|> 7+<Sl[-Lp[nnZ! j#rYÝW6nM2|h7kC"W7NmKaqw ]8\orB;4pr7jY 9 ` !Le뿪䕷uyn:z<ܺxM{Τ¦A `@16͒2 n!pDNƀKgVdz?~#AIVһ"kL5S.`=)zftUf@nKtt:]p-3G/+kq<)۰d囤ċj 'oWhRTn.5I y[Ώ|Ϟ#W=]}Q rW9sٓ/^SoErSEFޝ8w/RJ>ߵwVbL7: Bi DkoGhN)F4 Vo_K-LQģbE'y2۪:G3}?+_."O׾$Чp| P{L9}Kqk_)Bih^:4^XQ5T7hw!J]?_Q\$@y g|73C EtDkWzNsor~|o~WlpZf,E"Q!*"H SS!*R;A_`jx/hYy\mW2`~ \ɰ7tkvUl> m+pR wqZCpRݵ'O{2y^DUئ(ldHRD28l Jn N`]ogBcF['EBYi0csWIQYK'M_!ct!OOr'tGwG)&;7&= kM~dl[ڇ%gqˠ _ 5{6q$AC?d>5<3!`^+lPhvݺ|Hsp9He E'GX-]!&a}"l9&˼,:7_(*S 鿇|9Rb9A~tvsb7ZnXE`[n]UtrY}WuF#d# 6*fbC﵇BkZO;W2`Rcz49{FEL* 3 mN`N -t (uUZñE-泓8b1d-EGv~y%;~Hxsċ*+tI7q+=n0m'4W,ooًxP-Y [;hza;V˘1wmԾm8͍58&ΕoDkиϿ$j3.H2эSR”@;%<PzMuR(nyQRRTi%s{QƔ/q=F"ê5cђ՛Iw'b(t 0F(l͙n)a!~x!|ߦqe<"n$lw`{ݥ~گTg p`t@H2\aOυ`+cuѮWސ(5 ^I P]liJ~>]M=آgB)4roX$?GӾ\o]~zt+Sn"&X.JTHļ2}=tl,Y@t|訷S(Ah0r7C )>f΄M4O+wq.'̨Q -ǂ)83kEĤ 8=7{79B1m`몄 @YpY&s?)MCoE@Zf'DB;;b!VKxg .k Zhh Hk|/{JAw@4ne) +dp.M/h#.r*"\fc8x`BDņxhETLWP۾A/Ʈ? ϖBY\JDKĭ}*-Pe0(Td%)7E+!U`IWѓdi&E ]^s+eX _î}694RUR#?i%&KYKĪO/E'd S-=T1%jp AL]tW9kM[%%{}gdF\>q &TX^EYta٭rWH]g۩GP])Uǐ#(~]Yμ ZdRd4%-F5zzUI.lte[,dޖqκgw :?r2-< D+3a;VUZ͸NYŚ| =Y/h52s|D\ǟ'uş6:;V$ TԂaMۮ? %MK~,HnşÙJYMM`*f&vJ]JqrC6,LFİ`mAk ()3N |-=ƅ gnJ=ܳxbߒKZrDc/t- n23~ݤؽ=A;oỽɊ@ {焣o)͗Qdv߬%OWY\ mZb6۲6+<5Ls 񁹐|tP*~GQ1voDM1YbtJ?hr^bŗuڰR&Q&`LL5F(=ŧƈe)Nf[+^.`Ho]!$_{qfh(RBV1e;mAĉ*`<tZdtYY]Ui!LKǿE1a-[e|FaPŴsѡ »VBZ6O-u4h Hw=dSW1wVF@b_3hHr:.ܟ~dE|KWga!K,D0{Cz@,{*Ԓ4i[Ԏ XNRhAУMxAjM"5ΠZLY';"OP=;C̰QY :H;(%>^En锗ƞ.\ˇ3y(GdtP`| =Fn(ܩ+g#EP?pMGs'$ٳ&F X(~@ۦw[iz= ~`>< 2! 8aY4]"K12#Eu ٧[ܒ@w&X_gRX'k](*sF{'4./KE Fu7IN^\D0]dKUQRA5"־+N*7~iQ֯qvML(cοؘH!j[\"i}*lR@re+$)ۨqt"WKaR3ePff;Wӹ8"SἮ}sx搂t nbђ|1O3%NЎ7WPzƖjSWnn(/׾c-/Bbm;>mhۮ:rר\YҒ= li$MNm=|7MT@ K%c:V"R?8E>g?eY;/@D _n}'=kK}9f@xxJa騁^EXP1SM 7Zgg29xB6 ݡwk QCOeyZ8ߖ_QlRͮgIffkNuk)w8,PJc[C4w(xW.M县%(ZEDxh =}]uwTȿWf ~9.(]bݻ@V\.LIwHWZ8B"`ъvc\;;q^EFCcVӨyꟄ,bט-ICII'44T|.Obr[wMM!|]:qq*ǧ''6e[z8‘r8E^$wA ʻ'R"qo@GCbWj)?%A qvf]jԚoII',*VдԧT&eq_ԉ} I'P)SQ+[ɒh>b-2ymӉŤYy@- 9ThYj>>Fȩ}/&#E99 ;)0vq t{ ELJlq8 3ѿ~-ZJ Zb֫OEP秥!G74m{= /%8sH@CǤkJ}E ,lO(0 jOt{*7 [w`&?8@`Q̬럕NvIH9蓍  t CqRcy3(4 h=$lwGchl! +9 ;"5e;#Okwgͱ(H5XJj^"2BK}H>Pm(ОsK3% ;d`CX B6VЎ^3݀D,D:y̖jx+F$T Y۵NYES&SRZ2~l_T@=z.9&2f "W VЍ\5YE,G,dwnK?l6ۢDeG{wb MNJW[~M,h*bm! O\.?PN1sGx%a tWO?& 킃[k٬&(4i o27(*==.Z=-tIj69WpeaT>U0aPܿ"/Y">2wυR źy){VxRK7f#p#u8SM#5SD%:y}{z"ɹ]y⬯vW% V1>=[h!]#? 8x'2B|=y. e|\k ?zw)Gݍ|r8i/ H5Ĵ, 0ELJ^œ$X>KްUiCf5Nw.,ӖD@┵Ejx^kQ/y0xiɷr#|Dh_>#kLw ?K)CWS06faUPlN92Q 컱( {m~SoBz)nwS㽰)vֽ9Uw~@RD@k)S"ؙN0J}功OsPH*5h'șe#nJ($C=7?H\"B, ->1^d$xj-*`((uCGIؙh$̂,\KUU(^bLk/&חh{Q&" L&9r!Hi&Sl)p.&%  /֥:bon[EΥnHۍ7Y*F0EdavP`YRv7~Xl # d%- ܑdjE8: kԸ0mѸR5,W+T5b?@ji'Y̳^!zgT`Yt"&&?s0.z (&}4߭NJ&WFU0>{/`W U|K*::m! .켢W>I]Q@tLJ9ܵʑCFs7D!-F|v`Yx0kW{:3;)T’Jߚ}VED4eWn<M$ O >kqS5Gl2fzO멗eֻ=d?|co;jF >|_}cʬ%x uiP ~va2~ݴhe93][˳w HuܦY v*`!Qa1B-%y _&$Il #^C*Zn pX$N xsC5g.UVųouX[睐m9,^0v e+\f-8^|C7 vk;@k0eTbϵBݓ惧Z%E N6@kڈ3#ƭ:%7_>tg4Tbީs$/@etQNpYot9/Tu TJ{V8t̉>^xXNp8DF3茋Z+c'02tdIFlK'7@%Wqc%kq079PS  TE$bFI;JF fv v$~۳Wf&wgTJ$$1잉װ6@nې$`I/Nё *O+6Pj,c*;>_X|XT2}ɁsZUE2=3kag -G4P%s[ k۾HΗ))&u)?YC6eV) ]zV$GKF9; {?'iG%- AR'tl cQ,ɸ 5h2Lra2CV ٩[,ЎЯCj? ?/]K{DpʷZ{k4gD&yOҧwB8 wˢ` H7Wqz"qJͦ,)ȋB D f`Y[= -{ºbaCI8yMH9X'?M3~i5 t,+=w`.%ef!~̮;Ӧw#i^8X^ZIxoȹ|IEMSi6Of8_ B-tc%~uŌW3TVթjCX˴#=-GaI,{JulKjTQppkoB(_};nì?K3soN rsFw *5?d]h1݀%i4F7SIw] C.GFz3/XտT؆ƋE #OTϔ)KلH+bO~a]D$eaʒ '箠3]# po~j*ȭJ>ӕt݈p|̊$A&ʌTdGri,;H7DsӸ o/wG_G+1;؟U[ dG.TT-VpA( PCrh(g~e'P^ثƮWcS@/#8 4}#d`U;In}ް:\CR?LhͰU JO8Ԓo>>Xq!hQY7`CB0Eugg"X hM~6sKG{dE!qYΫ t^<7 L{c!-o+{>SrQ7cm!Wv5?EZE!Z^`*9rMҫXqaӵ*FU.Q=Px̵%FhҚy^HHx!G+F~vvѣǴߕNlrU X/%*եӶ͚[?MGMrQhs]vZ RmH~f[~Cem$G:!K KLZV9(jfhLBoCE\u)4 d\y&{,$SŮKڧ_2N#+Cps+_`cf_`6.zlJu ">!P=]rU}_?rh;9.lR@h{kEd6lua~^Aev2sn=vto "o?t%뫽$c16C`~m)z0KjjY Y[XksKB{ݴK \ZT@BVL$oeUkk:ńe`Vn_fc iŏZS`KtIxkjz}._^KH&$6<ġQz.wCW(2C+=ŰfH0]7玐i98,Rg(ZϵЊv_/]͏& 3Hd!vмwd/JR4$Jj_OM FRcxbSvgc Hlڬ|?HoxX!rIţD5co$1R6pȐ],)?$?(Lp onj#_aju6?ŲҒCM:|aWEЧDI;)u֜Pl\$0^H>@ݘ=E}C]3Ofu@[ci pH,yjC^/C+^<2SBA )a?>}k PP##Z7ZC Ld *z08|^x/za GXKZ]1a9b֘+҇tłXY,pM'"{ހ._i5ȫeN08H ۊ͋FX_Q+[Yl hNS~K~$ٕe_>=7R^N!]1Z^-H_6 I?&bs7 K4b*ܹF=gcBL~%[Eג:]%=d3k# ^iſC2^PMⅬWR${cu+UBc;)B֬Ŵ*HP|=7k6V31q^'o=i1Y>.{*dI'tV{Ej}{U,޺x9K6x{^ѱ3bh",D W#7lCFmRgCtބP%M] N)E0,]^BZpnݯNH%0ebֈ%\? Ʃs<")oi`bP.ܰ$A8j{repxK'P/QpV8Q8Lv VdE_ l,݁ ~Gl./?)Ȱǂr:6s-Ꞌxl t 1 y#%e,!>JGphvr\dWֹMHLc3aѝӤ5uo5qf|(*y/%Ǡ娭K~|qWu TНf0Ն~Shd[1FK2"e)Li_`LcJRM'9]Ѣy:᪼BbZ+InvOe^XgMk j?pF |*QDO5w3KڸX5AP;q"ִ{6d6 6?q2nc݂mRj盢z,QiE|8LB8>V 5Qh}4KI GlN'C?Maӏ/ ?t=a>.-I-` A>>E[U% ɼʇ(ssPp|h OƸ4ll&pτ92c72tI@1k0U'.nbN[t$^̑ry/;Vf98*b~PDs&7ŨM PG#4D[QO(1srDl CߴJ&&K/*V"L+TFk-rQ1fe@)Cj$,J*s_W?]8_ҵ~rjL$p_ӕ0ԍU8LИSk,1"TRώ }˨< v`PT&6 NT?iδ #z&TɵRjёL-@M)2L h 8&qfcv%>7dqF ,Qwkq'䅴_oj|IC{(#ou=Ɂ՘0$ < !t$/[Yq)E'^؂.̧.MIЦ@6FsVtv/^CVc(IZrRJrJ2\8ta^➴U0EPd& [f챉.hQ^c;H+,o< t"Vip-?WN>,VUk+MnSi5)kEHwcUSl\uCB*q! X?^k`*E~&G m+9RZSQqJZT *J!:ll'R~M1W bpC;.©5k}! / uڮnH4m3VΟT:nL-wld{Zd ]cQe奧 iɝK\iu'$ DS0!`O/GϞ}W7pMjc 0"1QhL-lZ4OW1zKd/\P'|'}hمA(~eʗo'TLoLjY"UΘA+DhqD}V|y-s>!'`i $&CITi ?$aGOs $w Dv$o us4oSLu3%ԣ7@nd_ScԨP5Ɔg0&kdC uD8}O *0)-=:!^LVg(oN]eYPwާaXVn #1_yy b{^HEW0- =1,5~Il-@>5Ib3GbRXmE f_iKW|g1Ln[, bKӛ 2sf.qK&>ܻ?04Ną8VncZ8c Lm,=ƹQ>bI%3|Rx6hc쥘Z9FYf0iZou%ةtზϼmxf1g*|0C;PbYDK!ۊ=Ň(PޤHb(x9a{_`2蔖A+Ua 0ATY Ey) I5ts%{Ώ6jZ\}S%:RAh7*(z`Qp֕IZC!f&jq{?#r]VBB"ɯoĸ"{VhwE '3Z"]} MңǴ}$q&'Ag++2@VZ+TH@Թd},Kh._1 [Yk߿_v^bv>Vs}&SHV):Cʎ_ӓSu?fXVTY1/&g{I\a F  ƴC7ZZ(^FZ}?f%rsFoD3Z9+c7(v[܂b5M~V4pv+Y#4in9@e3-(gԉxiLt\zz14Z|^S N`72K?yqv6MwŻ 4|g,oqW9U_c8sްvگ/nY?b@H۔-Nocҝ/)ašenDbP43)l A@#X,'aKbٟ>nYg5ek9o [[8}5\7z8c @#R{(IiZЂ]Xi7R꧒-!F Pv׉vۃKI V?).X@YᑧJ7zжۧDۨT>E^^辮T暀(F8IOE8xf ֢RXH֣8OjPX_ၠ?.A IKM;tf3;"% N_X 90v;!V(<5 )ӊiaLɭ0DZxiw! QxCWY|N+@L5ДōbÿIrNu fEayn-nyfg`6X|(Jl*4 1db!]Ez~QdT[7cA"1xjDfHpR?y V dL)~O pOt8L/% r~\jaqBˎӞ0,0pm\oZQ^)mз2i5 }쟫9]Wf]=ֳ)iy!@@3gӓ; LZY"#1rh㰝~KhwtX.2duе>(M:bwP&\jjy䛈EZerrڟt:] )&f2.5q%o?Heo׺c쨖+-;7b&8pq[s~Vԩs?zKQܳU|J;L:O+ݣ V({g7mJ&vn+̹ 3gSAO3T&yZ[% :$ oRCLFJ*ԨM '5(h{Tkc v䋵Bz ;~5 WyW$,2Qť%; Oa`W{ArV~)98Yy3z;G^C!\&s<5e\ S{YHuz]BL¸hw-ED4"c&:δ u)'[JzӰz"C7UG[ \]e10?4=݉>*)ת'\4X:gkյu"~,\ %lEX0 2R|z|re]I5mꨍIQ6r~ #ǵNCQDTa3#b/6 *.0 g֪⊣u{dh/4\ȃ;k܌nkxs7!,m2XfܗB1+c+zpqX7v+$7 hRzy$ay,':FW!LJXqOԻWO|{8dޘ]tټQfx 4d5]MZ#>IX,t%eQ!S?_?/=ՔlpID'BvpDA:͗NHLiD}Q`Zrgھo %F^oEElԧQc"/s]L2&0N<Wz6(IڪjE>De~ep׀aM:tthۛbaXBv,ӗ6j`#I@R":5?tٗ,UJjsIS gڡ,g3>=P92ݠ:XG(~10Y,{M~&EMZ:"JcC՛zƴ9\˹UsH[~‘ _U1o[ qL}҂ngdAbgXmw)@ f8T> 4wd{P^Ma,ŜǦ v^RFR$ /4j5~V1?V0{Eut6*u10q+~{j)C @:G%[@w=?&(mi% uUy*9d.JOc)m\~=JR$\ӂȷv|@@HYrKP43h]q)*H%;%;{0}[ߙ]]\v$/| UyC-f$r5Ċ bQsYm Wz8kYC7MpLǂx,9c[G:,9,ikt 6Syo9 )$H+`[`S;z>w"S Y5F3+|\9cF~ l%E̺oZ{rQ TG[r}|޺U𘗿M !^҇kRw#&a^~Auj@UZoϽݣb<|ncu* I+ވnz$ȐNP[Ŀ'n*V$.nL63Ttӂ-(!3{i#Z7X]|$MC%N)/ZEܩњ5f ІV%YI>gf+ y \/YP@aNyaiuR{=QȺ Q ݚ [[M-;m)iu9J<ʈ·W>Uil[܍"_?E3ł= O]WVr4G|{j1p͢ܚ^غK0RD’0]#Vw䩄hsAcYh/{:`~(} VMqETSZȩYd;qX|k<׋~0'T(YE!fJ9<jS-c+DߢXֻZfv3{ bؾfQN/V /iA%Ŵ]\.V3EkYJ*1,!O=T/揑L֙?ϛE?G댹v:6?/(|JchƂfZ| O =Ęl}ܜFwaP* _%guaTBצRWЯM ZMۂ[$ـbV\GPẍWYjR|]Pr6墴-<56M>C[%{[KӞ 4""$?jb+RGVJ uڢ/_\0D,ABKi~j^ Q_krt&IUw&;4lR 0W¢/@2lt EpUmF=>9.JȬx!@Hyuh'ɓ6*bT#};!ؾ ;seRk_c0W 4sʧaXGD-jbNuErZ[?ܭ ``L=XRD=,Y+a_x ckϮ1A; mAǫRS2P|+q 1f6@0Jf˰Zδ"<+G_JMmPbfIa\ذ kl#&֬=[@Dr@c-?8#1#RV]ApI$N Ђ7;ن{]4z2DF!BHW3ݻޏ ䷭uwر+$ 1vi}F%7^yqa7:Ci:2JVBTlU_xu@=DD1觛4fTu7bgH.[6_Yl5`U{A:^(6,3q;%h;`~8deʲ#QԊSxZ3OAРFl\M= +Q̿C!nPxXD3eZ׿+?l G˷I2Jh;,kTy6<q{ sHCo8vzZLFLBz N:[fq #9$0RBgu-.U._gط6ɧL^3H]7[:ɚ>nzxvĸE{ow>Dˈ,@;#Vdw>=$c1ye@ck]w#$fĦwx &P%EdnZ T|ܽ7$m!j 2tZ (]Q; |D3 wfiKmݮ@Z=+?tp0Il.'^6ggd]d19 L jQ<ϼH+uԉ|m%h6 :\-dfFʗ$ZKa^~aΙτsө-u`aӪMků)` +#2kjl~ ix!~{sG|BwJ1TAP3 ;ܕ,0>%e<7ewӕÃun̸=c Cs=4kV[Ii6P"[Yש^1Bf D<ӠHddlv>8Jn{ ֥#IqO&7xJH!'nJ۔Z <ĻU @wF -_ꇄ2w2M!\~wvVԋKqCYb;~%Lz$wS )¦ kȑJ!!фWRx)9IBf˹v/eTt2K#53轓]uȆ6Pq;J1^h yO0nXÐ6C}1є^RPm;1*MDu L%+OY\}Ni'')Wx>Td(2!E"@v7e",ēd{no+.<?:gs6?om.",e+QZ^X#;Dȭ8Č }hٖR66DitZMk]>A&54 8&T𕌰KfQpi&)%XyVwYHBƘ`%օuL%c=\M%-%F4r|~q)o\3Vv*'W)LiذqwI[Q 'bU39 b6]u'^{5TxSrg1c3>Bgxz7K8N,. =fcK]-闟iڹ||_!#+E?F=_X›{?ztsgf4}V YR2qOMf=}zZ:+Mϕ#X_ek 306~CHhI%ڒ\Şx^UX#&H"8bh9'?:P+.%>33pOT0,2&u CuguC(z#__}m?Gk #}5&vfjw:=#a\"9\ nN^%bYz=RkBWQZ!^z= "^@l~ќ4`YskbRZ2ɧ\-T-P䕡W"J ɨ2!wH[ *J&mKv涡+X@d&%LgVnbe%a;Osչ0+doݼH#~ϮW,D+gw1G5I\ְ&+Bvs>1*xmt ڼF/+6ڠ+z7-tzA^r|kk1 Ch##9e5R2̚2S<-o=Jx=X28 ǫ?6-vHgU^a ѷx}S߷w/*K>Nt6.qxEw9J H%},Ul<&2l2 j8٘Z-A "J8fB^b \ĀdN!zq).yj{ΐhaǧN+-I=4bO0\%| ,}E ;܃R=d}KݦݗS7-ǠEr+( ɵ3 {7 pz޵ft.^I t^f|_4A&@Mgcg(zIoMnJWŤBZ.B8I'j}iKfߪZ?aR: 4ZV`՗y.V겗Z:,?e1pi@@N'a GlgpЪ޳ txvJ~wblc䲓xcRɻd*$GegeC nkp{:ocsv_!WJH^Dp0P\|Ubrjf/bBN{n4.ۨ> 1Ju#9E&$Kukx0w1T4*k;Svm d;ٶǶv}F"54ܤz"5˜xtpػW b8"=cdȸǘ&i{ UkSQU@ĺhHV70d*HO?/\>>{~ Ew8?g[ݵw.ctJQI6.x N*XMZ\T8u8Ø;W3_n5VLҤ׸ju954g)<`7s3>$$0{d;l^ͲrDjE܌tcx~^OzJ4Pn3V(-Yj4x?NSd OZ wV!i-3Dv kЭ' bZ OXЕ\Y? b©*thcݲqpزI5!N-$a,"^73B6Lg"}A /#2WR,7==$Rb$6ER & (yU'Ŷu׆Y i>ÙRxG6jM4=uSs*2Y){#o(\|r[ we=y1;OQ4/ƦBHvl`XYAD.]:OMQ°Gbh-mbI78eçk(. %[z:Ɵ̺tw& HZETz޾ۇյ x*WjVYVɆgu,˜c<]d1fqÙxO`&NpA $͉Tx*:ӚPbodO[#U~x øѴ𑂉2F5]S֌imdȸiwǵ f,ޤDWk>/E4@$s3Ҕ0.IDNFcRrk|)gVoi* U#_.1 &sDr(f!51w& @Cl8c&HqPKd sM_ $W #G ['JM~BDdv{3I p N+@I a!Tk -9ڄT[_1]`\Y֦^lSU tZT2z!$2sNrPG4:&K[ \dE<,w9Z{Wd3$e4E Ygj'QU"p!d`-$_WhYpLHhDc$fGEq RU\A =q'{nPߛZz PuJ:1*Eư2'Kbrڠnֆ5 # w71+#8Nd@.HoU6sxDFU'h mB5;DsAFD\?k#4.^C4YV, ڱ꺫6nSVF\(oMͧ *(ɌXeżTU~&[,0f6ervd,zwj댛#hM?r`-#0<&i?`ǏR0֌ %L_Fz7w^~B,1~tӎWtIB/oμqa-uqa}<FNW> ~uf"\ `?U{1sM-Js+|S!d9rI\WcE{`֮nedrbp)-ԹY{Őb{w .g#>JzL'e8[hmӒ,9,o1HLе$r Y CQCWÓ\ D:r[k<62KZqyOӔzBEG,=i"LޖiA¡TL>`<5,yC|!{Uoʀgp5 s3󥸷lCɢA`Q'j2B+2ZqO6 }4^Y]s:̋i'1MpGhii:v 3bbq StK{ 5a 9E5NzГC-Dp6H=W֑5JYaN=ү·ξt[ ^,G޾Ԭ "۹^ï>rm&ר'$| 178t.V~Yq;dǻh9/ ky97y{7GFB8)Q~\ ߥM-A4}a2(ٳKg?O%o@RCʚ΍&_y2b`#2O]eZ;Ca5F73ɖ+ndm%Dj&o'V N-Ө8!v5 FQܭP5QQ 0gx.< kl}CDc iYۦWQ(" TWl0'V*ZqMK|st@~QĿ*9fp+F]~ Z,\bQ5 \bb@;\T|P7Is-xDܟi*ʦeLuj7!\KJeHp+2kZJMT3R$aTbܲXcpgP\}Z՜BjI"(($\¶h|2:],lZUYÕ=qe,D+Z=J"/t!'Ov*3Jnf56.pd7q\s9ØV/n;1.ϚHhzxzH(C~Wwn.؁]k#df}.n\%P[XwB1Br+d%[Dgϧ fP|o-[8i E:{A)򽼏-^qG;V~ojGE`Dls2K12jn)U ݦ|*}+dC'-KA2 dv 0#kpPEB/j|]U ΣUT4k/ UyG mмեQK0Tg@&lD}B`@[泄"^v>;pDU7@!=X偧CobY.)ͶO Ͳ͚NpzL\Qth[Px$wf:4 ĕMup:ͼTM#Ҿ]gYAC5R pL= Wf3 +ZKҷ\E?XVa̓T`j}jju_̸Ӫv~4 t4z]?L^#0 Z-*Oj ˉ~J0*\+znrdiV2a[$E=Nؽ42]nYwoΕ@nC~ "Y ѬY8NԠO\HI4|zj쎗KGګ%x6H5 =Z)pV2eyc4:DҺ=U__=0-љ [iRwxG*reLM"tAnM!mP}K1w/՞1'BCCZPv b1/̊N{BO(X>;f7ӼdASnSV?rUF%?]cc} $+ؘouC-a8γGR]6{P WW4x ME@%cqF<;L*,YhHV#:V+F1Ǻ [xn^ލag!!&^~dӛ+wgUZ vsx/KKhb)^}:Vl[x8;@K7҅Ka%BZ۹Oq^鱆P ɅRܨ˖C,eL'm,܍;ѺtA{=> ʖFO[2.iX,,ݯ_D46jD0^93DRj@Yl5%ah$aWk9uT}^Koizv;|,fE6=ZJY>wζL(en#oP v)ieӉL W[RSbc`b KB,gzէ:簰ox9DMwOjgVn/E)g`qxq$)HYc-YO${y3#hzgІ ɱMe/WG1T5 @dW}cC=Д{|gj{wa k:(PX p#^G! C -ޱjz(3B3U]T;9ḕl\ku8Sz.frUωFh51i [.yנٜOW2Bg79f h#i(6) r_3!Mc³!+\Eݚ޽f+o#'#iAo?<8rdچ?Ҽ vo( %'606#)#I}zp(dv1\;_n Zb!dSnY tzP.SV6IފzI6B͞ ;<|#Q E p{o9ք10nDc0GgWf@/N>Hv5?'|p޼Y|Zvh"~K\9t |vj̈Xm[?-5PzE+ 1fJ6 e?>OBult b֧H3fKf҈=lM~ҿU =A0bq{x^u_ 5 Kos<#Di Igw.<y1H!iXZYoYe江9RC0pO><B?\[OUen^iZ3Dc9+%5_kLô=8;ꕻ;喃NM\&LuiRsX.SEL%DąI tdu$gj2x<̙yuq%x`-RNꌑũ4jlYY$Uˮ0vY[?_"JFDƅ>H"iq'@uj:ѣ1 > c"xI]}kS׆Dn&o'um|tܹ&oefWo={ %S)eۤP=x8ũ!'+i M2petS3o k RMS7E"}rLU:uZQ: Ac;QXФBXJ-v`,rũ%V딮a!Nj(n>aiO$e8M©ŷo9s9\٣_HS) !7>wՃ)%o|]k:w}[aU8=8\wU n&hRS'zԝrgnO*OᱷPt!!LQ FvLv{&f|&ҧo?$M*ojZxmDBCIQֶCeGKZjŹ#Tk2N8hȺW's^M\ދWQ$W#ǔ$4((;^r ~ n ;b@RVOD`̄o?Ήd))W;Yƕ7!+? 6i$ݹn{Bl_~.KKQ;Iʥ~.=xߙe$$9m6%@-$LQ{HF;հ{gVO$gIq~8YK]҆Øf=.w-2I;4b^Inwz} lˬU%` a٦piSy~+ on*O9kP94"ῴONc%U:p+z9TqteJ\Euu 2O}Tٜ,;>@VV$[F7,t%v6vt)9v",\yz>$<t˿0yTׅ?δ?鬲u75iwtʯռ$ szĂU86E5 t4|:LMJj(=,=M_w%O>d$%LRh869Pw{8,Φ:FqLbFtluXZq|^_bG=L6kC'0z>/gAVx}?f\'5P3@<tST7<-G "w0Gq3Ѿ':॰?j WًΛպOܹodX&G~U TWBdZij֎m(^|bWDЮdf`" /lD!34"3֗PF]ru_!v'.A+<6Ry|F &7~+j8U/Zy`7}ǘ3-hNnb0hZckOOSBIce,9}S.I2}(f(2=E/(Y/}]MяY斖[ckftgtDo.G/={Qod 'ek=RSp5>2%a-Fa2qG͊ Y竺[ӍHK2t ENf^z/\u$@A;3 R} r?2g뙁yF֡ AN$:C}w6f68N0XtET/cT@X(R>o 2EjZ/B0Q1CAVvwP-ۇ:GH5'&rzwcT6n.wV0ogyk>зʠmMxZWAWMCj.V4YOJҮ`@ɤkDj4v1}{؍4 ެll(_]&Xn*]$_d*x¿x[RF4+"x'x|`wK*׻e\0Rem L8>Wv)(0ʇWcf\>=5 ɖݻM0g\×ۯEh#e :*>%~FK-m-D7~hK!cK$=g).}̻/$\1 O:`EVaӃ%z9jʟgovWgDAW o[y}k.!#}~l/C -[1=;@wX: LD#,!aq&!Ngq O cF㌒y RTѵn Th)c#k'cFEj:nppJkLem̙j݀Ģ6C~!Osz }i:&dprK/ԋYP?5' 3O/,? N|d p|-ϊ ʓC_h_CSTcxOG"W]k=`<; 7b:}/w^ٓ;ǏTnڧB:+ E)\5m/0fg{K_1YxȺ63̂hiվʓ$*Cb\N~8FnOt,\ֈgD|f%24Ӓٞ(nWnI '$.k9> `Ń}=RO\/D e+ :Di#mE].֢ڡD+>/AU)-1]8t=("Mҵ N"SvBy%Y~Nt5,fyx$}3|C^@wBN37<('٧ NlN$c\^a4.eoß!y? D经 /DkrMs-XKoNIJ4NQPAo'iW@ E"uPn(0C F;HߓMYݦ{!+qUkO=\:w W]b΍4V'Ūp}{[l!euB ]"HƴyDo6<jѩ_Oft`q̐V,(mpq7,WK(+R_ow rydc~7L:"j+DM ˜*b"p;IUs+_]?)"Fgz}jy|5'ZF+"\/-h2~ %^uƵU70˓ `3V|k\OIᱧ#²0n&OtpUFu|%'!nZj?s7Ag0vtxC2yG%YJ|7?mgKebێYᘰoE*yVM}EUv1B <k ZC˜]4&~-"7ӝm)ͣbO x=YLljrcmR!C\6G+U0ih2`>& ӊO8뀡bNg rpoF%B8^(BmӎyYDpsn`~;FW#PPۃ6 }@|PS=2icSp%QqgAn+&8 MGČ Aϧ-l$)5AMI&uj*.isd XaUƴo{4w1{˜z ojB)zRf̔xC{sqb<:l~)Vw!cYj0 ѰB XK_%4ı<DPo'W׍$V 1*E1g>/BԕM\L]M{XG+YWV0Wi5^He"LE]=w8|E "g<`Uj̵ 0touS'_;j:se0HAf`?~>YȠ1g$F[>"頤R]t `gACAIࠕzP;-&X J;! 46ҐH*q̀P{Y]L0r~##Љ.oe$yBO]t s6fX뭌YI׈b;E АhJ\0KMsAHBC?`){̙p. )oƁO^VgAE6\Wq9]n@\ʹ*$4y/NU3`PY3ܔ"X4ppjKCn\p] 3]1% sMʱSQ 'Í҅_:,h 7!2&і&1&{XDDĝiZl@ K-YT6 yOx yA R{䂉B(dL )s|5S .J F/J$?IvhϴdtUٞ2]J*NYo.,AJ Fqbl †/4q޸T~=3*ٮ:y(϶(|?f*wJ@ N? !⼹n;;~'i8;on%ދ*9ҋ2 ˬeTN@qU6g 3RrVL$7;ֳ(pe $;na*Sm杴tB\AoQ}\+Z wQ%SAȎҨ헶D⩇H tٮ7 9@4P2󺠪tոW/5CɅs_%jzl:LdeE|4(mxֿlpZdȱ_fY h=ਅp9\޹4F;mV20'7Febdq׳ZlxQ`[@jg) )@~v"vvMn0DaZoM=jqq1σCfrG5 hnA]TZfOi\ըb-H63-WMaGwJǏ>De~(A=gAZ;{pqIt%Lhݴ^nz@19 i;QNJHQ!II6; ӣ߹eb'RӪ(>2sѨqe\( CMjaq0h=<گq2:JCէE_Dũ|K[a2m:,>X[ TĘ\OY"8D hB6x7ޣ*~y@V@x)<7MӺh<1q]ފ9K&!\#(?Ԇ7az6m'*Rۭ +mYr/ g N¢xIeLTxKTVCHSric!l> p":2"!bkk0Lb/[G8UP|DK"4߾guS7O9IYգAP(톱Y .oWDROXuFb9krY '.W(PEBY3B=Trwx7XI_=3w'т3o@}IM $[aSL_jTG|p4Q*N;7=z_<eD)ܦáS؋gvҼ; s_Z˺'YJgm97?VL6z kw {T8ډP&ҿo);\g[)9F=von H!)[NCkO&gx*h'uod ιBXP~oPJME3JV$FbU2" : /!Jiy$?8{T^ R(O s0=X\DЅbwB.r8qh*0epO`hf+s{F D\ e㎉VzX!xt"Xl=ׂFgLN)SSפVhC=}$ Vf=胎븒{뚫{=ѧa}:d! x{w7~v#iznHH}Pc cEg' ?,fSaE^v4)RȢ]ID햚orIh@1s+)17t0d]Ne?F!^sϘ[%YoPYwOY[01}Y1A+kWQmB2GV J=ABO VmYկ3jg,8PƅNʿAO ¥ lXPH7<V(!'9lT8sx."#!@Ѽ1+o1暓P DdR}sAftNfPP .h kq/JeDyTk*L+ 5R$9Xy5ȐN1~&Mcv$eX%p:4gP0¨;{Ԏk稐2-n';\Ŝ5´Y-5W2{(@H&Nrd~vRB{qkhN=euh-8PeVj3 ]#0*yƔ [%l*lCߞ [İ$SULNߢXVxU|WCD]\*}\5́m>M(fF|XQdj5pٿbR~K% ]:A׀n}ޖy7LI"U+;%'d44 i>Jj:4?R7j8|NA1e9RJ?*DRӹ1h#:SFo#c9w[6 q < &-) Cy&U !Oyۋ<:7,!bP a x%J )4y(:ϬG.0j>K׏Y1ɲINβuH= hN^v.[(w[SEfn amQ5.{S{`dCRM}qAF l:H8ifA ffP6~eq7ja stb;rŎDp# iYy ˑ5Ohys'blFo6}إ&K:~*~;7Ҋ8yNLZ"W✮1 K<>S[AP p.IƳ٥yM*Vv.Y }Z]$}l G4?Dn%0v+?’n#]LK0~_g0xÉ1`hAVAmWQ L1}dۑihCV[wڿW2m!g0J@Bֳحfz9VV$nXijy` :xCpżHtfSa:6>|r[dXC`!~; ^{(qO]B?: @)+J׌kTwoL)\{Pl0/d$\]2\FSny.-DqҌ*="t+}=㙪y_ZPs)L3eV<`閒Sd@yӡV [I#@8.i45+6B8T84’yQ(qAǭ^7T>"VjMsuʨQ1}Q"W۠vm`Pd%~ ǶhPX3 bwy]p ۜYƙ@(T( Sl裈=qhÇ}D$ ]sDǡo4:b1^6An*432H Dvq%ʀnpudvӀEzDOqb>?4~^}ͣN ' ;=)/҂ ]jSWp탷rꢥ ̷\i09߬asm~4ʢOe3'٭dY|ip8 ]/Q`vbbL+* F WuVrLp9tCp1P۷HtG ~1A(¼~ed *36y>@k(fސҳޒR#m/5Uꧢ0o7gA <׷:4~xw\-D/0:UC{֍=u,(|ZrUfYLm9qF=& o<=ӽC0%,MOCċ O)` hߎ6FU'?u1ax/c"(Gu'Lnnx&!_aaptJRwwJW;C[&߷A.үf:c-e(z&۷NjxFBkǓ@e45kN\+r,Q;iƼM`Og^R;>z_qB Y3ѯ?6n;$ASZNP9ZSHr)-E,$XIa*}[N*]e*H`yVC[;M K"_`\hu+]fv_='Ǯ#}z㸉 <"5]](q{zqd"bpu=)<4\X 41Oپi 4"D몠݈1nhpa9#{ڤAf~4x"s\ZzR@q .Crc5Nis78;NriPfUaZ"cZ#~rgRyP"@~t#3c.=mv\9Lwoߒ;Jp5=(p0TqH cJ؝r:l]#&]7T̟0|zFy(~8iD)7pq,q uh 67ڴrV_ dcXtsKC Kd2ix `t껷nАlyGuC_DY<* fs{e~DCM67Ӱ4iOR8IzH sEڭ/_oV!wcp) 28룹s˱'w- [on.I?*63qfLH6i< 䀕v4@s<B?R֕v{d\wEW{4l.gϿ]DNCݫ5xդ$ 4njYH3vZ" aU*t\?qTH Q~N]f,v$2v[VW$"Ա[iEQ`z#]Q";y)R}p8&&H]G*z3s~;8O]B*58KVS:2S(3,)I"P1㊷Zemp{I߄t ;+62=L $'{G|ER$w 5=u+,E~餻-H S=\ 4}1pƊه?L24'os'v͖u4`f/i[ ?R=UQZ=K0WTȉpnLqcj+ RXH8LI5Ңaky!p ~f&/Kˑ˿!,S0f~) Zgj(>=N萼/yqŎ 68{g#vyf.@[>ȵ,[6H4#қqR49?6ɴԆ>![%Tס watw2p,z0RR{>dL1p..Ij K ˚?xJͭ3:7W^pXӞm2@,@aO``+Bg?b9,;~=d%W-$,Wʕ=8kl&gN;Bđ\T(;F8XfK#a1Oٽ |{Y. GYhtjݕbu߈h1FCd#@1)1vǗ!P}}L9O&d0iG=rʎ}(;>Mr| $$\k#\h.#(Ƈ.rLp,–u!+db}}wq8  e =1>5dP-m8Xޤcrڒe#7K繓d;YjB?W>G.;B$ѥ5x=h^زT o"{e:2ҼC?zL K9?M86R12uz۩L׈:d3 ܦڪ ъ:{c9ӍA>ݺ&|LA"u#Z E ~ sƂU7[{E,",(^%"S8PC boj"`3fR0 9]CW8> IӅ̴v NcB=oK kBO;0^8{ !CLތ2"y)ݣ띲a0p<+=>lEπ-6.;zmSL|Y QYGM: 2B-= oX#[%+dm9z%5Q.hm-8MZxZ['+Ќ;WͦK+vI8ZݮM%8*q3L w 1OWC a6/RG=p._!`(ㄳ'mA[e5WT*`)}gdaCb]Hcԭ`U+v&Q39d,lѝm֑gb(P2h!;? F.R}wE>ic1x4l6B۾ݦd`vb= r]djSLQ "W1QFz$O`eW"`D]wd5J&[$:*JN wW~)~9n,4 M_! 7|M$gt$DD:Xz2Ruɷs9XMA ]:6c[%mv? CasQLa0Bp1]X^*q[M¨S^V;X2+pz,lwӿ<2tsA~jfp)Ԕ%[&lխ0@Lmu#Rw=b&&c=jڈAEx/TnP&(zcdnm2ǰՠF쯱C,3+'+TU)`G;Qv"KTس|R;D1 t-쿡_Լ)XwΛbJ}nl9XA /Ơg c.%/ @ԀRR&P 51p"`_m̉)T{ueL"Q2'K>yt2W(l'fgr*% y +OǕ'KBN|R1J>{HR0,c#ϱDYs1Xc33 &LI1%dBB`h߄uE#!{#,_ؼ"w&1F0-] 5M^K}ҋb=%lOZN!ДV@]ҴE7658lDnhb D36#,᯺oSvC&W+|=qqtГ.=rOAKQd>nz*(e"&_/uJ$j%<}dg4: ՂJr:v&B8ÀKQa"PMM)>?D$qym~1!|-+ VlWEqѫD jW Y1ƜUB>30Tw=eeEķ2Տb̔qofWƌCAWdAcO#ԘWf}r?Q73$mgiM&z[ހ?qѮjDԾfj zc/cK RO!ǟ Q*q Pr9vR` тukHt/֮OW29:qTg\i x"aGhY'R|GMb8)Orh-L5ztJ  wz[o!vU',tRҸ"MߘVem<#a K*w!`+rΦf 02Ϋuz~?4qȁ^AVjxoU^KqS`4%@ y#cpCLcSk~dINJ_FGYJv YZ